Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File:                     3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier:          PLVlKSlBnvwY5VR9O1lIlsWJdN1DniUijkJxa1gEBm4=
Subject key identifier:   80:A9:3D:16:47:33:31:91:06:52:84:98:9D:91:E8:CE:FD:DB:28:6A
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer:       /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial:       0197665FDC0F78C20699301F1F07C3FE2340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number:          0EE9
Signing time:             Thu 12 Jun 2025 23:00:47 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:47 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:47 +0000
Files and hashes:         1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: KGypPSyXe0cRll+Xdml3UgOt3lMts83o7xmT/z4vFok=)
                          2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
                          3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
                          4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
                          5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:5f:dc:0f:78:c2:06:99:30:1f:1f:07:c3:fe:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
        Validity
            Not Before: Jun 12 23:00:47 2025 GMT
            Not After : Jun 13 23:00:47 2025 GMT
        Subject: CN=80a93d1647333191065284989d91e8cefddb286a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:4c:4d:55:c0:05:95:d3:53:88:b5:6a:52:
                    c4:21:77:94:56:90:e6:16:4b:c3:23:82:f1:9e:54:
                    44:1a:4d:b3:b4:cf:69:1f:96:4c:0f:a3:41:96:3b:
                    28:92:61:96:de:c2:1b:07:12:01:62:36:e2:a4:25:
                    58:4c:72:e2:89:83:15:c3:3e:3f:35:95:1a:25:4a:
                    ac:f7:37:c5:a5:9a:d5:63:fb:56:dd:1c:da:ad:bf:
                    94:90:f3:86:0d:a5:8f:f0:fa:3b:7a:5f:57:45:62:
                    6d:f4:3b:63:2a:00:58:07:4a:f5:81:3a:6e:09:c4:
                    4f:7d:0f:ce:c4:c6:98:b8:03:b0:3d:7b:0b:bf:82:
                    b0:ba:d5:42:81:ed:f9:1e:ac:3b:54:e8:f5:fc:9e:
                    e3:90:a4:51:b0:e1:8a:74:e4:ea:51:49:98:19:f2:
                    8e:3f:4f:c2:87:17:a1:24:90:a9:9b:41:59:4e:9f:
                    56:18:c5:71:de:4d:8f:fc:6c:17:fc:6f:0a:eb:11:
                    bb:0d:13:2e:cc:a1:01:af:f3:ff:ce:70:62:1a:f6:
                    33:3d:40:e4:19:e8:a2:0f:a6:e2:ab:ae:f0:a2:52:
                    a5:16:67:d0:bd:2f:2b:82:76:59:aa:be:07:ad:41:
                    0a:30:fc:40:d2:9e:d0:29:ac:68:cc:22:74:5a:9d:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A9:3D:16:47:33:31:91:06:52:84:98:9D:91:E8:CE:FD:DB:28:6A
            X509v3 Authority Key Identifier:
                keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:dd:83:d6:e8:28:11:77:0e:8d:a5:9e:40:f0:89:23:4c:
         c2:99:6d:d9:df:df:80:a1:99:db:dc:94:51:94:bb:a3:4c:fb:
         cb:ff:4a:11:04:82:c8:17:a0:9e:cc:14:d2:2c:7f:87:79:e8:
         a4:d7:30:71:dc:19:9b:9c:d7:9e:4d:2c:7a:fd:30:a8:51:c4:
         9f:36:e0:2d:11:2c:75:7e:d9:3e:2c:11:1a:f3:92:ab:07:a4:
         b4:c2:be:c4:a2:e5:b5:59:cf:15:8a:ab:cc:c3:80:55:39:2c:
         d0:00:38:4a:d9:c2:d0:28:89:4d:14:79:9f:d0:dd:75:6f:22:
         d0:15:2a:70:9a:1d:95:d6:07:64:44:5a:6b:46:ca:2e:cf:5d:
         08:54:4b:55:c1:26:fe:89:e7:36:13:ae:2d:5b:69:6d:e2:36:
         e9:bf:ef:47:d3:24:e1:72:e6:7d:61:89:8b:a2:e9:fe:5d:c6:
         ba:47:90:77:35:e3:79:d5:4b:ff:6e:74:78:6e:a6:3e:ed:c0:
         ff:8b:8f:e2:c0:c0:3e:9f:be:31:8a:36:03:11:0d:e8:58:a1:
         8f:25:13:a0:dd:cb:d7:b4:aa:dd:ff:f0:ab:8a:08:98:db:78:
         2a:32:e1:04:08:27:fa:5e:a6:6f:a5:40:a1:7e:84:78:3f:ae:
         d8:2c:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:10:18 2025 by rpki-client